Not rated
CVE-2016-5948 IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting
Description
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kenexa LCMS Premier on Cloud | 10.2.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 10.1.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 10.0.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.5.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.4.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.3.0 | No fix stated |
| Kenexa LCMS Premier on Cloud 9.2 | 9.2 → 9.2.1 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.1 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.0 | No fix stated |
Other CVEs of Kenexa LCMS Premier on Cloud
The 11 CVEs of Kenexa LCMS Premier on Cloud →
CVE-2017-1142
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by…
Not rated
CVE-2017-1143
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by…
Not rated
CVE-2016-9992
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection
Not rated
CVE-2016-9994
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection
Not rated